DllCanUnloadNow
DllGetClassObject
Pmajoba
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
689b939fc2bf723c607ee40fa1003a3c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
689b939fc2bf723c607ee40fa1003a3c_JaffaCakes118
Size
793KB
MD5
689b939fc2bf723c607ee40fa1003a3c
SHA1
b7d4a58b4b41bc66bfa7d9af0f43bbf63c812333
SHA256
6d0f3cdb16a29dd51eaf7e0a28d028a81256f104128f700f27ca9abfd86add2b
SHA512
68ec9a2be97e8462454817392de676ce3cc116ce8255da2ec5f936a758c22157fa991bfef9e54c991c0bbf227f0610cfa1157679d54d9d5c2ab3b541ad516f90
SSDEEP
12288:D2X1jYnSWOIwEnSjs8isBppHqfkPq+SkJv0z1EoewqpBcZzm9k:D2X6SfoSjsLs1HVPq+jvGe1pS
Checks for missing Authenticode signature.
resource |
---|
689b939fc2bf723c607ee40fa1003a3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Pmajoba
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE